Attack & News

Latest cybersecurity news, threat reports, and attack campaigns

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

5,672 articles

NEWShighCVE-2026-862189.8 CRITICALThe Hacker Newsabout 2 months ago

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting N-abl…

NEWSBleeping Computerabout 2 months ago

Microsoft adds age-awareness APIs that can tell if users are children, teens, or adults

Microsoft is adding new age-awareness APIs to Windows 11 that will allow apps to determine whether someone is a child, teenager, o…

NEWShighThe Registerabout 2 months ago

Microsoft breaks Patch Tuesday record with 974-CVE deluge

Adobe also brought goodies to the patch party and they deserve immediate attention

NEWScriticalCyberScoopabout 2 months ago

Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

While the vendor hit another monthly record, it hasn’t resulted in a flood of active exploits. Researchers encourage customers to…

NEWSKrebs on Securityabout 2 months ago

Microsoft Plugs Nearly 1,000 Security Holes

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by f…

NEWSThe Registerabout 2 months ago

OpenAI's Artifactory opened covert data-stealing channel alongside Hugging Face attack

Researchers disclosed the cross-account trick the same day rogue agents exploited another zero-day for admin access

NEWSCyberScoopabout 2 months ago

Feds accuse China of ‘systematic’ distillation of U.S. AI models

A joint advisory alleges Chinese companies are using sophisticated systems to route millions of data requests to US AI models acro…

NEWSBleeping Computerabout 2 months ago

DoppelCart fraud network uses 119,000 fake shops to steal credit cards

A massive operation dubbed "DoppelCart" uses more than 119,000 domains to run a network of fake e-shops that steal payment card de…

NEWSCyberScoopabout 2 months ago

Russian national extradited to US for alleged involvement in bank-account takeover scheme

Authorities accuse the 36-year-old and co-conspirators of collecting more than 5,000 victim login credentials to various banks. T…

NEWSBleeping Computerabout 2 months ago

The EU CRA's Real Question: What Shipped, and When Did You Know?

The EU Cyber Resilience Act's vulnerability reporting requirements take effect September 11, giving software vendors as little as…

NEWSWired Securityabout 2 months ago

Meta Releases Muse, a Personal AI Agent With Privacy ‘Built Into It’

Designed to compete with OpenClaw and Instinct, the company says Muse can do everything from sell your car to book you a plane tic…

NEWShighBleeping Computerabout 2 months ago

Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit

A Linux rootkit targeting devices in F5 BIG-IP APM environments can intercept PHP file loading and inject a fileless web shell dir…

NEWSCyberScoopabout 2 months ago

CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

The deputy director cited Operation Absolute Resolve as evidence that cyber teams have become central to CIA missions. The post CI…

NEWScriticalSecurityWeekabout 2 months ago

Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days

The record-breaking September security update fixes two exploited privilege-escalation zero-days and 20 potentially wormable vulne…

NEWSBleeping Computerabout 2 months ago

Microsoft releases Windows 10 KB5122878 extended security update

Microsoft has released the Windows 10 KB5122878 extended security update, which includes this month's record-breaking September 20…

NEWScriticalCVE-2026-7565010.0 CRITICALSecurityWeekabout 2 months ago

Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day

Tracked as CVE-2026-75650, the exploited defect allows unauthenticated attackers to execute arbitrary code. The post Adobe Patches…

NEWSCyberScoopabout 2 months ago

Why federal cyber defense demands an offense-driven mindset

Static checklists and annual penetration tests leave agencies with dangerous blind spots. True resilience requires moving from rea…

NEWScriticalBleeping Computerabout 2 months ago

Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

Today is Microsoft's September 2026 Patch Tuesday, with security updates released for a record-breaking 966 flaws, including two a…

NEWSBleeping Computerabout 2 months ago

Windows 11 cumulative updates KB5124008 & KB5122880 released

Microsoft has released Windows 11 KB5124008 and KB5122880 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulne…

NEWSSecurityWeekabout 2 months ago

The Hidden Instructions That Can Hijack AI Agents

Malicious prompts concealed in documents, metadata, emails, images and code can manipulate autonomous agents into taking dangerous…

NEWShighSecurityWeekabout 2 months ago

Hackers Return $263 Million Stolen From Liquid Network

Alleged ‘white-hat’ hackers drained $320 million from Liquid’s federation wallet, demanding a bug fix. The post Hackers Return $26…

NEWShighBleeping Computerabout 2 months ago

ShinyHunters hackers claim breach of Florida "DAVID" DMV database

The ShinyHunters extortion gang claims it breached an online platform for the Florida Department of Motor Vehicles database known…

NEWSBleeping Computerabout 2 months ago

OpenAI says ChatGPT outage causes image generation errors

OpenAI is investigating an ongoing incident causing ChatGPT image generation failures and delays when uploading files. [...]

NEWSThe Hacker Newsabout 2 months ago

Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution

A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions…

NEWSSecurity Magazineabout 2 months ago

8 Data Security Stories to Know About (August 2026)

Security magazine takes a look at eight data security stories from last month.

NEWSThe Registerabout 2 months ago

Boston Scientific left nursing its bottom line after cyberattack

Medical device giant warns August intrusion will hit Q3 and full-year sales and earnings as recovery drags on

NEWSBleeping Computerabout 2 months ago

August updates trigger 0xc0000409 errors on Windows Server 2016

Microsoft says the August 2026 security update may trigger 0xc0000409 errors on Windows Server 2016 systems where the Compatibilit…

NEWSSecurityWeekabout 2 months ago

Cylake Raises $245 Million Ahead of Cybersecurity Platform Beta

The startup founded by Palo Alto Networks’ Nir Zuk has raised $290 million to build an AI-native security platform for highly regu…

NEWSThe Registerabout 2 months ago

How to secure hybrid meeting rooms without sacrificing user experience

SPONSORED FEATURE: With regulators tightening rules and attack surfaces widening, meeting-room kit must bake in security without p…

NEWScriticalSecurity Magazineabout 2 months ago

CISA Cuts Critical Infrastructure Security Resources

CISA will be rolling back services that support critical infrastructure.